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ABSTRACT 

The design of efficient quantum circuits is an important issue in quantum computing. 
It is in general a formidable task to find a highly optimized quantum circuit for a given 
unitary matrix. We propose a quantum circuit design method that has the following 
unique feature: It allows to construct efficient quantum circuits in a systematic way 
by reusing and combining a set of highly optimized quantum circuits. Specifically, the 
method realizes a quantum circuit for a given unitary matrix by implementing a linear 
combination of representing matrices of a group, which have known fast quantum cir- 
cuits. We motivate and illustrate this method by deriving extremely efficient quantum 
circuits for the discrete Hartley transform and for the fractional Fourier transforms. The 
sound mathematical basis of this design method allows to give meaningful and natural 
interpretations of the resulting circuits. We demonstrate this aspect by giving a natural 
interpretation of known teleportation circuits. 

Keywords: Quantum circuits, quantum signal transforms, unitary error bases, circulant 
matrices, teleportation. 

1. Introduction 

The worldwide efforts to build a viable quantum computer have one source of 
motivation in common: The potential to solve certain problems faster on a quantum 
computer than on any classical computer. There are a number of ways to specify 
quantum algorithms but the formulation of quantum algorithms as a uniform family 
of quantum circuits is the most popular choice. 

Deriving an efhcient quantum circuit for a given unitary matrix is a daunting, 
and, frustratingly, often impossible, task. There exist a small number of efficient 



quantum circuits, and even fewer quantum circuit design methods. If efficient quan- 
tum circuits arc rare and difficult to derive, then is only natural to try to reuse these 
quantum circuits in the construction of other quantum circuits. We present in this 
paper a new design principle for quantum circuits that is exactly based on this idea. 

Suppose that we want to realize a given unitary matrix A as a quantum circuit. 
Suppose that we know a number of quantum circuits realizing unitary matrices D{g) 
of the same size as A. We choose a small subset of these unitary matrices such that 
the algebra generated by the matrices D{g) contains A. Roughly speaking, if the 
generated algebra has some structure, e.g. is a finite dimensional (twisted) group 
algebra, then we are able to write down a quantum circuit realizing A, which reuses 
the implementations of the matrices D{g). 

As a motivating example servos the discrete Hartley transformation, which is a 
variant of the discrete Fourier transform defined over the real numbers. In Section 3, 
we show how the Hartley transforms can be realized by combining quantum circuits 
for the discrete Fourier transform and its inverse. We generalize the idea behind 
this construction in the subsequent sections. 

An essential ingredient of our method are circulant matrices and certain block- 
diagonal matrices, which are introduced in Sections 4 and 5. In Section 6 we 
present the main result of this paper. We show how to derive a quantum circuit for 
a unitary matrix A, which can be expressed as a linear combination U = aiD{gi) + 
. . . + anD[gn) of unitary matrices D{gi) with known quantum circuits. For ease of 
exposition, we do not state the theorem in full generality; the generalizations of the 
method are discussed in Sections 7 and 8. 

There is a relation between Kitaev's method for eigenvalue estimation of unitary 
operations and the present method which is explored in Section 9. Section 10 
demonstrate the design principle with the help of some simple examples. We revisit 
the Hartley transform in Section 10.1, and discuss fractional Fourier transforms in 
Section 10.2. We give an interpretation of the well-known teleportation circuit in 
terms of projective circulants in Section 10.3. 

Notations. We denote by Z, Z/nZ, M, and C the ring of integers, the ring of 
integers modulo n, the field of real numbers, and the field of complex numbers, 
respectively. The group of unitary n x n matrices is denoted by U{n). We denote 
the identity matrix in U{n) by 1„. 

2. Background 

We consider quantum computations that manipulate the state of n two-level 
systems. A two-level system has two clearly distinguishable states |0) and |1), 
which are used to represent a bit. We refer to such a two-level system as a quantum 
bit, or shortly a qubit. The state of n quantum bits is mathematically represented 
by a vector in of norm 1. We choose a distinguished orthonormal basis of 
and denote its basis vectors by . . . , x^), where Xi G {0, 1} with < z < n. 

A quantum gate on n qubits is an element of the group of unitary matrices Z// (2"). 
We will use single-qubit gates and controUed-not gates. A single-qubit gate acting 
on qubit i is given by a matrix of the form U^^^ = l2n-i-i f/(g) Iji, with U G tl{2). 
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A controlled-not gate with control qubit i and target qubit j is defined by 



where © denotes addition modulo 2. We denote this gate by CNOT^''-'\ We will 
refer to single-qubit gates and controlled-not gates as elementary gates. 

It is well-known [1] that the single-qubit gates and the controlled-not gates are 
universal, meaning the set 



generates the unitary group ZY(2"). In other words, each matrix U E U(2") can be 
expressed in the form U = wi'W2- ■ - Wk with Wi € Q, Q < i < k. Of special interest 
are the shortest possible words for U. We denote by k{U) the smallest k such that 
there exists a word W\W2 ■ ■ ■ Wk, with Wi G G, < i < k, such that U = wiW2 ■ ■ ■ Wk- 

The complexity measure /t turns out to be rather rigid. It is desirable to allow a 
variation which gives additional freedom. We say that a unitary matrix V realizes 
U with the help of ancillae provided that V maps |0) (g) ^ \Q) ®U\x) for all 
\x) e C^". We define Kanc(t^) to be the minimum k(V) of all unitary matrices V 
realizing U with the help of ancillae. 

As examples, we mention the following bounds on the complexity for well-known 
transforms acting on n quantum bits: the Hadamard transform K{Hf"') = 0(n); the 
discrete Fourier transform K(i^2") = 0{'n?) when realized without ancillae [2,3], and 
Kanc(-f2'') = 0(n(logn)^ loglogn) when realized with ancillae [4]. Various unitary 
signal transformations with fast quantum realizations can be found in [5-9] . 

3. A Motivating Example 

Assume that wc have already found an efficient quantum circuit for a given 
unitary matrix U G Z^(2") with 0(n°) quantum gates, c some constant. We would 
like to find an efiicient quantum circuit for a polynomial function fiU) of U , allowing 
ancillae qubits. If wc succeed, then this would prove that Kanc(/(C^)) € 0(n'^) for 
some constant /c > 0. 

As an example, consider the discrete Hartley transform Ajv € U{N) of length 
N Gf^, which is defined by 



where the function cas : M ^ R is defined by cas(.T) := cos(.t) +sin(x). The discrete 
Hartley transform is well-known in classical signal processing, cf. [10,11]. If we 
denote the discrete Fourier transform by Fn , then 



is an immediate consequence of the definitions. 

Let TV = 2". We will now derive an efficient quantum circuit implementing the 
Hartley transform An with one auxiliary quantum bit. 



g = {[/«,CN0T(*-'') I UgU{2), i,j e 



{l,...,n}, j} 
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Figure 1: Circuit realizing a quantum Hartley transform 



Lemma 1 The discrete Hartley transform can be realized by the circuit shown in 
Figure 1, where R denotes the unitary circulant matrix 

_ 1 / i-i i + i 
2 V 1 + ^ ^-i 

and H the Hadamard transform. 

Proof. Let Fjv = Ai(Fjv) denote the unitary matrix effecting a discrete Fourier 
transform on the n least significant bits if the most significant (ancilla) bit is set; 
in terms of matrices Fjv = Ijv ® -Fjv- Similarly, let F"^ = Ijy ® F^. 

We now show that the circuit shown in Figure 1 computes the linear transfor- 
mation |0) I a;) ^ |0) \x) for all vectors \x) e C" of unit length. Proceeding from 
left to right in the circuit, we obtain 

\Q)\x) ^ -L(|0) + |l))|x) 

^ l={\Q) + \l))F^\x) 

^ -l=\0)Fr,\x) + ^\l)Fl,\x) 



-±\l)(^^{l + i)Fr, + l{l-i)F-^]\x) 



\0)An\x) + — \1)F-^An\x) 



H 



-^|0)^.|.) + i_ 

±(\0) + \1))Am\x) 
|0) An \x) 



as desired. Note that we have used the property that the discrete Fourier transform 
has order four, i. e., F^ = 1. □ 

We cast this factorization and the corresponding complexity cost in terms of 
elementary quantum gates in the following theorem. 



4 



Theorem 1 The discrete Hartley transform £ W(2") can be implemented with 
0(n(logn)^ loglogn) quantum gates on a quantum computer. 

Proof. Recall that the discrete Fourier transform F2r. can be implemented with 
0(n(logn)^ loglogn) quantum gates, see [4]. The claim is an immediate conse- 
quence of Lemma 1. □ 

We pause here to discuss some noteworthy features of the preceding example. 
We notice that the discrete Fourier transform F2r. satisfies the relation F2rv = 1, and 
that all powers I2" , , Fi" ) ^2" have fast implementations with known quantum 
circuits. We constructed the Hartley transform as a linear combination of some 
of those powers, namely as a linear combination of and f|„ using the circuit 
shown in Figure 1. A nice feature of this circuit is that any improvement in the 
design of quantum algorithms for the discrete Fourier transform will directly lead 
to an improved performance of the discrete Hartley transform, since the circuits for 
the discrete Fourier transform a simply reused in the Hartley transform circuit. 

Wo will generalize this idea in the following sections. The methods arc much 
more general. We will even be able to combine several different circuits, assuming 
that some regularity conditions are satisfied. The factorization of the Hartley trans- 
form implied by Lemma 1 will be obtained as a special case of this more general 
theory in Section 10.1. 

4. Circulant Matrices 

Our goal is to derive a circuit implementing linear combinations of matrices. 
This is not an easy task, because all operations need to be unitary. We assume that 
the algebra generated by the matrices has some structure which we can exploit when 
deriving the circuit. Our approach will be particularly successful when the generated 
algebra ^ is a finite dimensional (twisted) group algebra. In this case, we can write 
down a single generic circuit which is able to implement any unitary matrix U 
contained in A. In the case of a group algebra, a group-circulant determines which 
matrix U is implemented by the generic circuit. 

Recall the definition of a group-circulant [12, 13]: 
Definition 1 Let G be a finite group of order d. Choose an ordering (gi, . . . ,gd) 
of the elements of G and identify the standard basis of with the group elements 
of G. Let |c) = XlggG'-slff) ^ '^'^ denote a vector indexed by the elements of G. 
Then the d x d-matrix 

circcdc)) := {Cg-ih)g,heG (1) 
is a group-circulant for the group G. 

The following example covers the important special case of cyclic circulants. 
Example 2 Let G = Zd be the cyclic group of order d generated by x and the 
elements ofG ordered according to (1 ^). The circulant corresponding 

to\c) := Y^tZo Ci jx*) e C takes the form 

I Co • • • Cd-2 Cd-l \ 
Cd-l ■ ■ ■ Cd-3 Cd-2 

\ Ci • • • Cd-l Co / 
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We see that each row is obtained from the previous one by a cyclic shift to the right. 

The following crucial observation connects group-circulants with the coefficients 
ag in linear combinations. The linear independence of the representing matrices 
D{g) of a finite group G ensures that the circulant {ag-ih)g^heG is a unitary matrix. 
Key Lemma 3 Let n be a positive integer. Let {D{g) : g G G} be a set of linearly 
independent unitary matrices which form a finite subgroup ofU{n). Furthermore, 
let A e U{n) be a linear combination of the matrices D{g), 

geG 

with certain coefficients ag G C. Then the associated group circulant matrix Ca '■= 

ictg-ih)g.heG is unitary. 

Proof. Multiplying A with A^ yields 

A-A^ = [Y.agD{g)).(Y,aKD{h)^) 

geG heG 

= Y.Y.'^9^^^9)D{h)^ 

geGheG 

= J^i^'^ghOhjDig). 

geG heG 

Since the matrices D{g) are linearly independent, it is possible to compare coeffi- 
cients with A ■ A^ = In, which shows that 

heG 

holds, where 5i^j denotes the Kronecker-delta. In other words, the rows of the 
circulant matrix Ga are orthogonal. □ 

Remark. If the representing matrices D[g) are not linearly independent, then 
the group circulant is in general not unitary. In fact, it is not difficult to see that 
for each unitary matrix A there is a choice of coefficients ag such that the group- 
circulant is not unitary. However, we will see in Theorem 6 that even in this case 
it is possible to choose the coefficients ag such that the associated group-circulant 
is unitary. 

The notion of circulant matrices is based on ordinary representations of a given 
finite group G. It is possible to generalize the concepts presented in this section 
to projective representations. In doing so, a greater flexibility in forming linear 
combinations can be achieved. This will be studied in detail in Section 8. 

5. Case-Operators 

Let G be a finite group, and denote by D: G U{2"^') an ordinary matrix 
representation of G acting by unitary matrices on a system of m quantum bits. 
Our goal is to derive an efficient implementation of a block diagonal matrix D® 
containing the representing matrices D(g), 

=dmg{D{g):g€G). 
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This will be an essential step in creating a linear combination of these matrices. 
We need an efficient implementation of this block diagonal matrix, and a suitable 
encoding of the group elements will allow us to find such an implementation. 

For simplicity, we assume that G is a 2-group, that is, |G| =2" for some integer 
n > 1, but the ideas easily generalize to arbitrary solvable groups. It is possible to 
find a composition series E = Go<Gi<i . . .<Gn — G of the group G such that the 
quotient group Gi+i/Gi contains exactly two elements, Gi+i/Gi ^ Z2, see [14]. A 
transversal of G is a sequence of elements T = (ii, . . . such that U G Gj, and 
the quotient group Gi/Gi-i is generated by the image of the element ti & Gi, 



iU) = GJG, 



for 



1, 



The essence of this somewhat technical construction is that we obtain a unique 
presentation of each element 5 e G in the form 
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,ai 
''1 



■t^" with a^e{0,l}. 



(2) 



This allows to "address" each group element by a binary string of n bits. Abusing 
notation, we identify the element g with its exponent vector (ai, . . . ,a„), and we 
write D{ai, . . . ,an) to denote the matrix 

£)(ai,...,a„) = £)(ir •••O- 
Let D® G ^^(2"+™) denote the block diagonal matrix 



/ D(0,...,0) 



V 



£»(0,...,0,1) 



£)(!,. ..,1) J 



This block diagonal matrix contains the representing matrix of each group clement 
g = f^^ ■ ■ ■ f^" ■ We need only an implementation of the matrices D{ti), . . . , D{tn), 
because the representing matrices satisfy the relation D{ti)D{tj) = D{titj). We 
will conditionally apply these matrices on the system of m quntum bits. We have 
n control bits, one for each matrix D{ti). 

We need a lemma which allows us to give an estimate of the complexity of our 
implementation. 

Lemma 2 Let U be an elementary gate, i.e., an element ofQ. Then the conditional 
gate Ai([/) can be implemented using at most 14 elementary gates. 

Proof. If f7 is a single-qubit gate, then Ai(C/) can be implemented with at most 

six elementary gatc;s [1]. If U is a controlled- not gate, then h.\{JJ) is a Toffoli gate, 
which can be implemented with 14 elementary gates [15]. □ 

We now state the main theorem of this section, which gives an upper bound on 
the complexity of the case operator U®: 

Theorem 4 Let G be a finite group of order 2" with a unitary matrix repre- 
sentation D:G^ U{2™). Let T = (ti,...,tn) denote a transversal of G. Lf 
ct = maxtgT K{Ut) is the maximum number of operations necessary to realize one 
of the matrices D{t), t £ T, then the block diagonal matrix D® can be realized with 
at most k{D®) < lAncx elementary operations. 
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Figure 2: Quantum circuit for a transversal case operator 



Proof. We observe that due to binary expansion of the exponent vectors the opera- 
tion [7® can be implemented as in Figure 2. The statement concerning the number 
of gates of this factorization follows immediately from the previous lemma. □ 

A familiar example is given by the additive cyclic group Z/2"Z. Assume that 
this group is represented by D{g) = , where g G Z/2"Z and U is some uni- 
tary matrix satisfying f/^ = 1. A composition series is given by the subgroups 
Gi = 2"~*Z/2"Z. A transversal for the group Z/2"Z is, for instance, given by 
the group elements U = 2""', that is, T = (2"-\ 2"-^, . . . , 2, 1). The implemen- 
tation described in the previous theorem realizes the powers f/^ . An arbitrary 
power is realized by setting the n control bits according to the binary expansion 
5 = Eft2"-%with5i'G{0,l}. 

6. The Design Principle 

Suppose that we want to realize a unitary matrix A G IA{2™') by a quantum 
circuit. We assume that some unitary matrices D[g) G U{2"^) with efficient quan- 
tum circuits are known to us. Familiar examples are discrete Fourier transforms, 
permutation matrices, and so on. Suppose that some of the matrices D{g) gener- 
ate a finite dimensional group algebra containing the matrix A, then, simply put, 
a quantum circuit can be found for A. The following theorem describes how this 
can be accomplished. To ease the presentation, we do not state the theorem in 
its most general form. The more technical generalizations will be discussed in the 
subsequent sections. 

Theorem 5 Let G he a finite group of order 2", and denote hy T = {t\, . . . ,tn) a 

transversal ofG, that is, each element g € G can be uniquely represented in the form 
g = t'^^ ■ . . .■ where ai G {0, 1}. Let D : G ^ U{2'^) be a unitary representation 
ofG such that the images {D{g) : g G G} form a set of linearly independent unitary 
operations. Suppose that A G U{2™) is a linear combination of the representing 
matrices D{g), 

geG 

with coefficients Og G C. // Ca = circcda)) denotes the associated group- circulant, 
with elements ordered according to the choice of the transversal T, then the matrix 
A is realized by the circuit given in Figure 3. 
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Figure 3: Quantum circuit implementing a linear combination 



Proof. Note that by the choice of the transversal T the ordering of the elements of 
G is fixed. We define H to be the transformation H := H2® ■ ■ .® H2® I2", where 
the first n factors are equal to the Hadamard transform H2- The transformation 
H corresponds to the leftmost and to the rightmost transformation in Figure 3. 
Furthermore, we define Ca '■= circ(|a)) (g) I2" and T> := diag(-D(5i), . . . , £'((?2"))- 
Observe that V, Ca, and "D"^ are the remaining transformations in Figure 3. The 
circuits for D and 'D~^ are shown in factorizcd form, hereby exploiting the group- 
structure of the case-operator. We obtain the factorization of T> as in Figure 2. 
To verify that the circuit indeed computes |0) |0) A |a;), we first consider the 

matrix identity 



V-'^-Ca-T> 



(^g-^D{g2 



ag^„D{g2n) \ 



Q!gil2" 



(3) 



To be more precise, the entry at position of this block-structured matrix is 

equal to a^-i^ D{g~^)D{gj) = ag~ig ,D{g^^gj). This means that each row of blocks 
of (3) contains the set of matrices {agD{g) : g E G} in some permuted order. The 
same holds for the columns of this matrix. Hence we can conclude that the first 
row of the matrix H"^!)^^ ■ Ca ■ 'D is given by -^^(Y^g agD{g), . . . , agD{g)) = 

-^=[A, . . . ,A). Hence applying H to the columns of this matrix will produce 



_ff-i . p-i .Ca-V-H 



A 






u 



(4) 



with some unitary matrix U e ^(2"+"*— 2*") and zero-matrices of the appropriate 
sizes. Note that the entries in the same rows resp. columns as A must vanish, since 
A as well as the other operations used in (4) are unitary. □ 

Remark. Note that the assumptions in the theorem can be considerably relaxed. 
The restriction to 2-groups is not necessary. In fact, the implementation of case 
operators can be extended to arbitrary solvable groups. Moreover, we will show 
in the next section that the representing matrices D{g) do not need to be linearly 
independent; one can always find suitable unitary group circulants Ca- Finally, it 
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is not necessary that the representing matrices form an ordinary representation; the 
extension to projective representations is discussed in Section 8. 

Note that the cost of implementing a circuit for A is determined by the cost of the 
transversal elements K{Dt- ), i < i < n, and by the cost of the group circulant k{Ca ) • 
If the group G is of small order, say the order is bounded by c, then the efficiency 
of the implementation of a transformation which has been decomposed according 
to Theorem 5 depends only on the complexity of the transformations A 
family of representations with this property will be studied in Section 10.2. 

7. Generalization 

The theorem in the previous section assumed that the representing matrices 
D{g) of the group G are linearly independent. The next theorem shows that one 

can drop this assumption entirely. 

Theorem 6 Let D:G^ W(2") be an ordinary representation of a finite group G. 
If a unitary matrix A can be expressed as a linear combination 

A=^ agD{g), Ug G C, 

then the coefficients (Xg can be chosen such that the associated group circulant is 
unitary. 

Proof. A finite group has a finite number of non-equivalent irreducible represen- 
tations. Let D'^^^-.G U{nk), fc e /, be a representative set of the non-equivalent 
irreducible unitary representations of the finite group G. 

Let D^j-.G ^ C be the complex- valued fimction on G, which is determined by 
the value of the (i, j)-coefficient of the representing matrix D'*^) . We obtain X^fee/ '^l 
functions in this way. It was shown by Schur that these functions are orthogonal, 

unless i = i' , j = j' , and k = k'; see [16, Section 2.2]. 
Denote by 

J = {k £ I: D'^'^^ is a constituent of the representation D}. 

Let E denote the direct sum of the irreducible representations, which are not con- 
tained in D, that is, 

E{g)= D('\g). 
kei-J 

We have 

^e/=^agp(5)®i?(5)) 
geG 

for some ag G C. Indeed, comparing coefficients yields a system of \G\ linear equa- 
tions. This system of equations can be solved, since the coefficient functions are 
orthogonal. The circulant corresponding to the coefficients ag is unitary by Theo- 
rem 7. Ignoring the representing matrices E{g), we obtain A as a linear combination 
of the representing matrices D{g), as claimed. □ 
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8. Extension to Projective Circulants 

We have assumed in Theorem 5 that A is obtained as a linear combination of 
matrices D{g), which form an ordinary representation of a finite group G. It turns 
out that the quantum circuit used for the implementation of A can also be used, 
with a minor modification, for projective representations. We recall a few basic 
facts about projective representations and then give the appropriate generalization 
of the circulant matrices introduced in Section 4. 

Note that projective representations have been used in quantum information 
theory. They for instance turn out to be the adequate formalism to describe a class 
of unitary error bases [17]. 

Let D: G — > [/ (n) be a projective unitary representation of a finite group G with 
factor set w. In other words, w is a function from G x G to the nonzero complex 
numbers such that 

D{g)D{h)=uj{g,h)D{gh) (5) 
holds for all g,h G G. The associativity of matrix multiplication implies the relations 

u){x, y)w{xy, z) = w{x, yz)w{y, z) (6) 

for all x,y,z G G. This shows that w is a 2-cocycle of the group G with trivial 

action on . 

We assume that the neutral element 1 of the group G is represented by the 
identity matrix -D(l) = In, which implies 

uj{g, 1) = w(l, g) = 1 for all g e G. (7) 

The values of the factor system iv are of modulus 1, since the representation matrices 
D{g) are unitary. This shows, in particular, the relations 

uig,h) =Lu{g,h)-'^ for g,h€G. (8) 

Let a G C'*^' be a vector which is labeled by the elements of G. We define a 
projective group circulant for (G, w) with respect to a to be the matrix 

circG,t^(Q) = {uj(g~'^,h)~'^ ag-ih)g f^^Q- 

Projective circulants have been introduced by I. Schur [18]. We show that in the 
analog situation to Theorem 5 the associated projective circulants are unitary. 
Theorem 7 Let D: G U{n) be an n-dimensional unitary projective represen- 
tation of a finite group G. Suppose that the operators {D{g):g € G} are linearly 
independent. If a unitary matrix A GU{n) can be expressed as a linear combination 

A = agD[g), with ag G C, 

then the projective group circulant circG,t^(a) of the coefficients ag is unitary. 
Proof. It suffices to show that the rows of the projective group circulant circG,w {a) 
are pairwise orthogonal and of unit length, or more explicitly that 

'^{ui{g,h)u}{k,h))~'^aghakh = Sg^k (9) 



11 



holds for all g,k € G. We will show that these orthogonality relations can be derived 
from the matrix identity AA''D{k) = D(k). 
Multiplying A, A'^ and D{k) yields 

AA^D{k) = (^a,Z),)(^ay:D(/i)t)2)(fc) 

g&G heG 
geGheG 

Notice that the multiplication rules (5) imply 
Therefore, AA'^D{k) = D{k) can be expressed as 

Lo{eh,h-^)Lo{£,k)^ 

ieG heG 

Setting X := £, y := h and z := h^^ in (6) shows the identity 
which allows to simplify the previous expression for D{k) to 



. Ujlyi, k) 



h^G 



The substitution g = ik yields 



Setting X := gk~^, y := fc, and z := ft. in the cocyclc relation (6) shows the identity 

uj{gk^^,kh) uj{g,h) 
This allows to write D(k) in the form 
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Comparing coefBcients on both sides yields 

EUj{k,h) r 11 7 ^ 

—7 — rraghakh = Og^k for all g,keG. 

Using (8), this shows that the orthogonahty relations (9) hold. Thus, the projective 
group circulant civcG,ui{c() is indeed unitary, as claimed. □ 

We remark that a theorem analogous to Theorem 5 holds in the situation where 
D is a projective representation of a finite group G. In this case the matrices Df. 
have to be replaced by a suitably rescaled transversal and the circulant matrix Ca 
has to be replaced by the corresponding projective circulant. Theorem 7 guarantees 
that the latter matrix is unitary. 

Using projective representations a greater flexibility can be achieved. In Section 
10.3 we give an example for a projective representation of the group Z2 x Z2 which 
is given by the Pauli matrices. 

9. Relation to Kitaev's algorithm 

Kitaev presented in [19] and [20] a quantum circuit that allows to estimate an 
eigenvalue of a unitary matrix provided that the corresponding eigenstate is given; 
see also [21] and [22] for further descriptions of this scenario. The phase estimation 
provides a unified framework for Shor's algorithm [3] and the algorithms for abelian 
stabilizers [19,23]. In the following we give a brief account of this method. Starting 
from a unitary transformation U on n qubits and an eigenvector Itpx), we want to 
generate an estimate of A. The precision of this approximation is controlled by the 
number k of digits we want to compute in the binary expansion A = 0. 61 62 &3 • • • 
of A, i. e., bi G F2. 

If we assume that, in addition to U and \il>\), we are given efficient quantum 

circuits implementing Ai(U^^) for j = 0,. . . ,k—l, then it is possible to accomplish 
the task of approximating A by means of an efficient quantum circuit. This circuit, 
which is given in Figure 4, consists of three parts. 

Reading from left to right, we have a quantum circuit acting on two registers: 
the first holds the eigenstate and the second, which ultimately will contain 
the approximation |A), is initialized with the |0) state. In a first step an equal- 
weighted siiperposition of all binary strings on the second register is generated 
by application of a Hadamard transform to each wire. Then the transformation 
U® := \i) \x) i-> \i) W \x) is performed for i = 0, . . . , 2'^ — 1. Note that if U has finite 
order 2*^, then U® is a case-operator (in the sense of Section 5) for the cyclic group 

. In a third step an inverse Fourier transform is computed giving the best 
fc-bit approximation of A which is stored in the second register [21]. 

The connection between the algorithm for phase estimation and the circuit given 
in Figure 3 is established as follows. For the special case of G = Z/2'^Z generated 
by a unitary transformation U G U{2") of order 2^^ we first apply the circuit given 
in Figure 4 to each element of a basis : z = 1, . . . , 2*} of eigenvectors of U in 

order to obtain the (exact) eigenvalues Aj in the second register. Note that there 
are at most 2*^ different eigenvalues of U. We then perform the scalar multiplication 
\i diXi for certain ai £ W(l) and all i = 1, . . . ,2*^. Finally we run the circuit 
given in Figure 4 backwards and observe that 

F~i,'^ ■ diag(ai, . . . ,0:2'=) • ^2" = circz/2fcz(/3i, • • ■,^2''), 
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\0)-H 





Figure 4: Quantum circuit for eigenvalue estimation 



where the vector |/?) = (/3i, . . . ,(32'') S is given by |/3) = \a). Here = 
[e^'^*'^'/^]fe,;=o,...,Af-i denotes the (unnormahzed) discrete Fourier transform. 

Note, that the method presented in Section 6 is more general than this twofold 
application of the circuit for eigenvalue estimation as it allows to work with repre- 
sentations of arbitrary finite groups. 



10. Examples 

The decomposition method introduced in the previous sections is demonstrated 
by means of the Hartley transforms which have been introduced in Section 3 and 
fractional Fourier transforms (cf. [24,25]) which are a class of unitary transforma- 
tions used in classical signal processing. Using the method of linear combinations 
of unitary operations we show how to compute them efficiently on a quantum com- 
puter. Finally, we show that the quantum circuit for teleportation of a qubit can 
be interpreted with the help of this method. 



10.1. Hartley Transforms Revisited 

The efficient quantum circuit shown in Figure 1 of Section 3 can be recast in 
terms of Theorem 5. First recall that the identity 

AN = aFN + (3F^ 

with a := {^^) and /3 := {^^) shows that the Hartley transform Aj\ is a linear 
combination of the powers 1^, Fn, F'^, F^^ of the discrete Fourier transform F^. We 
can simplify this to obtain Apf = Fj^Apf, where A^ is defined as A^ ■= al^+PF'^. 
Since F^ is an involution, we can apply apply Theorem 5 in the special situation 
where \G\ = 2. Hence the circulant C^^ is in this case the Z/2Z circulant matrix 

_ 1 / 1-2 1+Z \ 

Since for N > 5 the matrices Ijv. -Fw, F'^, F^ are linearly independent, we can use 
Theorem 5 to conclude that R has to be unitary. Hence we can implement Aj^f using 
one auxiliary qubit with a quantum circuit as in Figure 3. Combining the circuits 
for Fjv and for we finally obtain the factorization of ^jv shown in Figure 1 of 
Section 3. 
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10.2. Fractional Fourier Transforms 

A matrix A having the property A" = B with a S M is called an a-th root of 
B (where in general this root is not uniquely determined). In case of the discrete 
Fourier transform Fjv we can use the property that F^ = 1 jv to define an a-th root 
of Fjv via 

Fn.c ■= ao(a) • Iat + . . . + 03(0) • F^, (10) 
where the coefficients a, (a) for i = 0, . . . , 3 are defined by 

ao{oi) ■= ^{ l+e*") cosa, ai(a) := |( 1— ie'") sina, 
a2(a) := 5(— l+e*") cosa, 03(0;) := |(— 1— ie'") sina. 

Note that like in the previous example of the discrete Hartley transforms in Section 
10.1, we have used the property that Fn generates a finite group of order four to 
obtain the linear combination shown in eq. (10). 

It was shown in [24] that the one-parameter family {F^^a \ a G R} C C'^^'^ 
has the following properties: 

(i) FN,a is a unitary matrix for a e R. 

(ii) Fjv.o = Ijv and F/v,^/2 = Fn. 

(iii) (Fjv,a)^/" = Fn for a e M. 

(iv) Fjv,a • Fjv,/3 = Fjv,a+/3, for a,l3eR. 

Using Theorem 3 we immediately obtain that Fjn^a can bo computed in O(n^) 
elementary quantum operations for all a e M, since the complexity of the discrete 
Fourier transform of length 2" is O(n^) (of. [3,26]) and the circulant matrix 
appearing in this case is Ca ■= circ(ao(Q;), . . . , a3{a)) which can be implemented in 
0(1). More precisely we have 

= circ(|a)) = F^^ ■ diag(l, e""^", e^'", e"'") • F4. 

Using the results of [4] we can reduce the computational complexity of to 
0(n(logn)^ log log n) if we have no restrictions on the number of ancilla qubits. 
Hence, we obtain the following theorem which summarizes the complexity of 

computing a fraction Fourier transform. 

Theorem 8 Let a G M and Fj^^a be the fractional Fourier transform of length 2" 
and parameter a. Then Kanc(f2",a) = 0(n(logn)^ loglogn). 

10.3. Teleportation Revisited 

In this section, we show how the well-known quantum circuit for teleportation 
of an unknown quantum state (cf. [27,28]) can be interpreted with the help of our 
method. The essential feature of the circuit in Figure 3 is that a measurement on 
the upper quantum bits can be carried out immediately after the transformation 
Ca has been performed. This has the advantage that the transformations D{tn)~^ 
etc. can be classically conditioned. This explains the classical communication part 
of the teleportation circuit. To obtain the EPR states and the Bell measurement 
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Figure 5: Quantum circuit realizing a fractional quantum Fourier transform 



we use some easy reformulations of the transformations exploiting the nature of the 
projective circulant in case of 2 x 2 matrices. 

Suppose that Alice wants to teleport a quantum state = a |0) + /3 11) of a 
qubit in her possession to a qubit in Bob's possession at a remote destination. If 
the destination qubit is in the state |0), then, conceptually, the task is to apply a 
unitary operation U such that U\Q) = \ip). Specifically, the matrix U can be chosen 
to be of the form 




where \a\'^ + = 1. 



Clearly, it would not be feasible for Alice to communicate the specification of U to 
Bob by classical communication. Therefore, she has to proceed in a different way. 
Recall that the matrices 

i2 = ( J ! ) ' = ( ! i ) ' = ( J -! ) ' ^-^^ = ( ? ~J ) • 

form a basis B = {'^2,o'x,o'z,(Jx<yz} of the vector space of complex 2x2 matrices. 
Thus, the matrix U can be written as a linear combination U = X^sggCsi?. Note 
that the Pauli basis B is an orthonormal basis of C^^^ with respect to the inner 
product = \ir{B'^ A). As a result, the coefficient cb corresponding to B & B 

can be easily computed by cb = \tT:{B'^U). Consequently, we obtain 

The Pauli matrices define a projective representation of the abelian group Z/2Z x 
Z/2Z (see, e. g., [17]). Applying the method described in Section 8, the decomposi- 
tion (11) gives rise to the projective circulant matrix Cu defined as follows: 

a + a 

{13 + P) 
{a -a) / 



/ a — a 

13 + 
a + a 



P + P a + a 

a — a P — P 

-iP-P) a- a 

-(a + a) P + p 
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We can express C'u by a sequence of Hadamard gates, controlled-not gates, and the 
single-qubit gate U. Indeed, a straightforward calculation shows that 



{H O I2) Cu {H ® I2) 



/ a 


















—a. 





13 


—a 





V 


a 





0/ 



--■.Cu. 



Applying suitable permutations from the left and the right to the matrix Cu we 
finally obtain the expression 



Overall we obtain that Cu is given by the circuit shown in Figure 6. 

^^^^ 



(12) 



Cn 



u 



H 



^ 



Figure 6: Realisation of the projective circulant Cu in terms of the operations U , 
controUcd-not gates, and the Hadamard transform H . 

We now turn to the circuit implementing the transformation U using the linear 
combination (11). In the following we will modify the generic circuit step by step 
using elementary identities of quantum gates. We start with the identity 



|0) 
|0) 
|0) 



|0) 



H 
H 



Cu 



H 
H 



U 



which is obtained directly from the method of Sections 6 and 8. The matrix U is 

given by a linear combination of Pauli matrices in eq. (11). This limear combination 
determines Cu. We rewrite Cu as a product of CNOT gates and local unitary 
transformations using eq. (12). We obtain the circuit 





H 
H 








H 










H 




H 
H 








Z 
















r 
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F 


n 












^ z 





where we also turned the first controlled-o"2 gate upside down. Now we can use 
the basic fact that HazH = <7x to rewrite the controlled- cr^ framed by the two 
Hadamard gates on the top wire in the following way: 
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We can simplify the sequence of the first five gates of the last circuit. Indeed, 
since we start from the state |0) |0) |0), the state resulting from applying the first 
five gates is |0) (|00) + |11)). This state can be obtained by applying the first two 
of these five gates alone. This simplification yields the following circuit 
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> H n 
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which decomposes into three stages: (i) EPR pair and state preparation in which, 
starting from the ground state |0) |0) |0), two of the bits are turned into an EPR state 
while the third qubit holds the imknown state lip), (ii) Bell rn,easurem,ent oi the two 
most significant qubits, and (iii) a reconstruction operation which is a conditional 
transformation on qubit one depending on the outcome of the measurement of qubits 
two and three. 



Prep 




Bell 




Recover 





Hence, this circuit equals the tclcportation circuit for an unknown quantum state 
\tp) = t^|0), see for instance [28, Section 1.3.7] or [27]. In summary, we have seen 
that it is possible to derive a transformation of a quantum circuit corresponding 
to linear combination of the transformation U as a sum of Pauli matrices into the 
teleportation circuit. 

11. Conclusions 

The factorization of a unitary matrix in terms of elementary quantum gates 
amounts to solve a word problem in a unitary group. This problem is quite diffi- 
cult, in particular since only words of small length, which correspond to eSicient 
algorithms, arc of practical interest. Few methods arc known to date for the design 
of quantum circuits. Several ad-hoc methods for quantum circuit design have been 
proposed, mostly heuristic search techniques based on genetic algorithms, simulated 
annealing or the like. Such methods are confined to fairly small circuit sizes, and 
the solutions produced by such heuristics are typically difficult to interpret. 

The method presented in this paper follows a completely diff'erent approach. We 
assume that we have a set of efficient quantum circuits available. Our philosophy 
is to reuse and combine these circuits to build a new quantum circuit. We have 
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developed a sound mathematical theory, which allows to solve such problems under 
certain well-defined conditions. Following this approach, we have demonstrated that 
the discrete Hartley transforms and fractional Fourier transforms have extremely 
efficient realizations on a quantum computer. 

It should be stressed that the method is by no means exhausted by these ex- 
amples. From a practical point of view, it would be interesting to build a database 
of moderately sized matrix groups which have efficient quantum circuits. This 
database could in turn be searched for a given transformation by means of lin- 
ear algebra. It is an appealing possibility to automatically derive quantum circuit 
implementations in this fashion. 
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